← All runs

Trustify branch daily perf tests · 2026-10-26 06:05 UTC

Target trustify (release/0.6.z, scale snapshot) · 2026-10-26 06:05:48 UTC → 06:15:47 UTC · Users 10 · Deltas vs previous run (2026-10-25 05:40 UTC, branch_0.6.z_2026-10-25T04-55-23_a575145)

Type branch-daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch release/0.6.z · Commit a575145e4aec · Workflow run

Duration
9m 59s
Total requests
512,822 (-192,927)
Failure rate
0.0%
0 failed requests
Throughput
856.2 req/s (-321.0)
Latency 95%ile
56 ms (+13)
Latency 99%ile
99 ms (+15)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing06:05:4806:05:520m 04s2 → 10
Maintaining06:05:5206:15:459m 53s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10007,1005,80497
2GET/api/v3/sbom/{sbom_id}/download3,4003,24790
3GET/api/v3/advisory?q=CVE-2021-&total=true1,800381566
4POST/api/v3/vulnerability/analyze1,700465716
5GET/api/v3/sbom?q=name~redhat&total=true1,300619113
6GET/api/v3/vulnerability?sort=base_score:desc&total=true1,100586356
7GET/api/v3/sbom?sort=ingested:desc&total=true78030288
8GET/api/v3/advisory?offset={offset}&limit=1610276100
9GET/api/v3/sbom?limit=10&sort=name:asc&total=true600258106
10GET/api/v3/sbom?offset=100&limit=10&total=true560219195

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}91 (-42)0 (0)0%104 (+15.9)25.22171,2870.15 (-0.1)0
GET/api/v3/sbom/count-by-package105 (-15)0 (0)0%39.2 (+17.3)4.7110130.18 (0)0
GET/api/v3/sbom/{sbom_id}117 (-25)0 (0)0%142 (+38.7)37.82482,0150.20 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids90 (-36)0 (0)0%25.1 (+5.3)4.0987.220.15 (-0.1)0
GET/api/v3/sbom/{sbom_id}/download90 (-49)0 (0)0%3,247 (+801.3)3,0303,498136,458,6380.15 (-0.1)0
GET/api/v3/sbom/{sbom_id}/license-export80 (-36)0 (0)0%32.7 (+6.4)5.931012340.13 (-0.1)0
GET/api/v3/sbom/{sbom_id}/packages91 (-26)0 (0)0%151 (+36.5)16.342512,6480.15 (0)0
GET/api/v3/sbom/{sbom_id}/related96 (-70)0 (0)0%136 (+48.6)27.432815,3720.16 (-0.1)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true106 (-6)0 (0)0%258 (+12.5)45.590112,1890.18 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true195 (-65)0 (0)0%219 (+56.6)27.093111,9410.33 (-0.1)0
GET/api/v3/sbom?q=label:type=product&total=true95 (-33)0 (0)0%21.9 (+3.1)2.9171.2220.16 (-0.1)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true100 (-27)0 (0)0%26.6 (+7.0)4.01105220.17 (0)0
GET/api/v3/sbom?q=name~redhat&total=true113 (-31)0 (0)0%619 (+467.7)12.11,602220.19 (-0.1)0
GET/api/v3/sbom?q=published>2024-01-01&total=true108 (-22)0 (0)0%176 (+46.6)30.360429,3170.18 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true88 (-67)0 (0)0%302 (+83.9)61.31,19729,6000.15 (-0.1)0
GET/api/v3/sbom?total=true214 (-33)0 (0)0%162 (+39.1)27.169429,3170.36 (-0.1)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}591 (-137)0 (0)0%59.7 (+3.8)5.641442,3950.99 (-0.2)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download582 (-166)0 (0)0%29.9 (+10.2)5.63167178,4230.97 (-0.3)0
GET/api/v3/advisory?deprecated=Consider&total=true562 (-179)0 (0)0%72.6 (+18.8)7.332,91344,0030.94 (-0.3)0
GET/api/v3/advisory?limit=1&total=true100 (-59)0 (0)0%72.7 (+9.6)8.728802,5350.17 (-0.1)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true594 (-168)0 (0)0%71.7 (+22.6)6.583,02620,1930.99 (-0.3)0
GET/api/v3/advisory?offset=100&limit=10&total=true598 (-172)0 (0)0%69.3 (+6.9)7.012,73919,4071.00 (-0.3)0
GET/api/v3/advisory?offset={offset}&limit=1100 (-59)0 (0)0%276 (+6.5)50.67122,1190.17 (-0.1)0
GET/api/v3/advisory?q=CVE-2021-&total=true566 (-230)0 (0)0%381 (+100.8)23.44,01849,4680.95 (-0.4)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true613 (-152)0 (0)0%59.2 (+4.1)5.081501,9711.02 (-0.3)0
GET/api/v3/advisory?q=modified>3 days ago&total=true596 (-175)0 (0)0%25.2 (+8.5)2.87150221.00 (-0.3)0
GET/api/v3/advisory?q=title~openssl&total=true598 (-180)0 (0)0%49.9 (+15.9)9.56686126,4521.00 (-0.3)0
GET/api/v3/advisory?sort=modified:desc&total=true561 (-211)0 (0)0%75.7 (+22.9)6.883,29638,1280.94 (-0.4)0
GET/api/v3/advisory?total=true579 (-180)0 (0)0%128 (+40.7)7.373,41047,4170.97 (-0.3)0
vulnerability 7
POST/api/v3/vulnerability/analyze716 (-263)0 (0)0%465 (+153.0)1.613,6612,473,5641.20 (-0.4)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true371 (-121)0 (0)0%20.9 (+4.0)2.8770210,1500.62 (-0.2)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true357 (-150)0 (0)0%29.7 (+10.1)4.301,12220,8000.60 (-0.2)0
GET/api/v3/vulnerability?q=base_severity=high&total=true362 (-120)0 (0)0%36.2 (+10.8)3.391,51621,2670.60 (-0.2)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true371 (-150)0 (0)0%31.2 (+11.2)3.511,30620,8510.62 (-0.2)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true356 (-170)0 (0)0%586 (+127.3)1662,37810,0370.59 (-0.3)0
GET/api/v3/vulnerability?total=true382 (-130)0 (0)0%23.6 (+10.0)2.9160020,0140.64 (-0.2)0
purl 15
GET/api/v3/purl/base/{purl}359 (-90)0 (0)0%55.0 (+13.8)4.8837348,8270.60 (-0.1)0
GET/api/v3/purl/base?q=namespace=redhat&total=true402 (-71)0 (0)0%67.2 (+8.3)2.999432,0800.67 (-0.1)0
GET/api/v3/purl/base?q=type=rpm&total=true389 (-98)0 (0)0%62.2 (+8.3)2.371192,0800.65 (-0.2)0
GET/api/v3/purl/base?sort=name:asc&total=true348 (-125)0 (0)0%207 (+50.7)52.56242,9430.58 (-0.2)0
GET/api/v3/purl/base?total=true360 (-107)0 (0)0%60.5 (+6.8)2.761202,4500.60 (-0.2)0
POST/api/v3/purl/recommend1,062 (-317)0 (0)0%228 (+49.8)47.16102,7471.77 (-0.5)0
GET/api/v3/purl/{purl_id}398 (-29)0 (0)0%73.9 (+16.1)15.82615310.66 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true361 (-89)0 (0)0%71.4 (+14.8)3.141,0004,7340.60 (-0.1)0
GET/api/v3/purl?q=curl&total=true351 (-55)0 (0)0%58.0 (+10.6)4.491,66411,7140.59 (-0.1)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true377 (-81)0 (0)0%28.6 (+2.3)2.0292.3220.63 (-0.1)0
GET/api/v3/purl?q=name=curl&total=true373 (-80)0 (0)0%28.0 (+3.2)2.2828212,0840.62 (-0.1)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true393 (-99)0 (0)0%79.6 (+11.6)2.313,15813,7700.66 (-0.2)0
GET/api/v3/purl?q=purl:ty=rpm&total=true370 (-142)0 (0)0%91.2 (+37.4)2.243,44413,7700.62 (-0.2)0
GET/api/v3/purl?sort=purl:name:asc&total=true374 (-137)0 (0)0%39.9 (+13.6)2.1666411,1010.62 (-0.2)0
GET/api/v3/purl?total=true345 (-107)0 (0)0%26.6 (+5.2)2.114819,8770.58 (-0.2)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,784 (-177)0 (0)0%42.3 (+0.6)1.3193.31,1432.98 (-0.3)0
GET/api/v3/license/spdx/license?q=apache&total=true1,792 (-219)0 (0)0%3.83 (+1.1)1.2260.01652.99 (-0.4)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,755 (-315)0 (0)0%42.5 (+1.0)1.4288.71,9812.93 (-0.5)0
GET/api/v3/license/spdx/license?total=true1,754 (-230)0 (0)0%42.6 (+0.7)1.291091,5252.93 (-0.4)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,784 (-205)0 (0)0%37.3 (+7.7)6.611804252.98 (-0.3)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,748 (-279)0 (0)0%31.4 (+6.2)4.85153222.92 (-0.5)0
GET/api/v3/license?q=license~Apache&total=true1,739 (-314)0 (0)0%28.1 (+6.0)3.161581202.90 (-0.5)0
GET/api/v3/license?q=license~GPL&total=true1,751 (-254)0 (0)0%28.3 (+5.8)2.75165922.92 (-0.4)0
GET/api/v3/license?total=true1,817 (-154)0 (0)0%71.5 (+6.8)7.752101,1013.03 (-0.3)0
analysis 3
GET/api/v3/analysis/component/{component}12,819 (-6,671)0 (0)0%14.7 (+5.2)1.511032521.40 (-11.1)0
GET/api/v3/analysis/latest/component/{cpe}12,673 (-6,722)0 (0)0%15.0 (+5.2)1.432842521.16 (-11.2)0
GET/api/v3/analysis/status12,708 (-6,880)0 (0)0%14.2 (+4.8)1.2710210321.22 (-11.5)0
importer 1
GET/api/v3/importer?total=true47,611 (-23,114)0 (0)0%11.4 (+3.7)1.20106279.49 (-38.5)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true13,119 (-6,563)0 (0)0%14.1 (+4.7)1.521063821.90 (-10.9)0
GET/api/v3/group/sbom?total=true12,785 (-6,928)0 (0)0%14.3 (+5.1)1.501042221.35 (-11.5)0
GET/api/v3/group/sbom?totals=true&total=true12,852 (-6,785)0 (0)0%14.3 (+4.9)1.391152221.46 (-11.3)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100097 (-43)0 (0)0%5,804 (+1,913.9)4,5768,109600.16 (-0.1)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true100 (-34)0 (0)0%75.2 (+11.6)11.73421,0650.17 (-0.1)0
GET/api/v3/sbom-labels?total=true89 (-28)0 (0)0%72.5 (+9.5)9.951261,0650.15 (0)0
other 2
GET/.well-known/trustify177,620 (-60,667)0 (0)0%1.40 (+0.4)0.7739.0886296.56 (-100.9)0
POST/api/v3/ui/extract-sbom-purls176,829 (-60,963)0 (0)0%1.58 (+0.4)0.8549.645295.24 (-101.4)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}110 (+23)130 (+10)140 (+10)170 (+40)220 (+40)220 (+30)
GET/api/v3/sbom/count-by-package40 (+31)70 (+33)80 (+20)84 (+11)91 (+11)100 (+19)
GET/api/v3/sbom/{sbom_id}140 (+30)160 (+30)230 (+90)240 (+40)240 (+30)250 (+40)
GET/api/v3/sbom/{sbom_id}/all-license-ids9 (+3)55 (+19)70 (+9)77 (+7)87 (+6)87 (+1)
GET/api/v3/sbom/{sbom_id}/download3,300 (+800)3,300 (+800)3,300 (+800)3,400 (+800)3,500 (+900)3,500 (+800)
GET/api/v3/sbom/{sbom_id}/license-export13 (+2)62 (+15)76 (+5)84 (+11)100 (+23)100 (+19)
GET/api/v3/sbom/{sbom_id}/packages100 (+7)220 (+40)290 (+80)380 (+110)420 (+120)420 (+30)
GET/api/v3/sbom/{sbom_id}/related120 (+36)190 (+80)240 (+50)290 (+90)330 (+70)330 (-160)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true200 (-10)320 (-30)480 (+60)600 (+30)810 (-140)900 (-200)
GET/api/v3/sbom?offset=100&limit=10&total=true170 (+70)290 (+60)420 (+50)560 (+150)860 (+260)930 (-10)
GET/api/v3/sbom?q=label:type=product&total=true8 (+3)39 (+5)64 (+5)68 (-2)71 (-12)71 (-15)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true12 (+6)51 (+20)71 (+9)76 (+7)110 (+33)110 (+31)
GET/api/v3/sbom?q=name~redhat&total=true780 (+630)970 (+790)1,200 (+1,000)1,300 (+1,010)1,600 (+1,250)1,600 (+1,200)
GET/api/v3/sbom?q=published>2024-01-01&total=true130 (+31)200 (+30)380 (+110)440 (+160)590 (+100)600 (+70)
GET/api/v3/sbom?sort=ingested:desc&total=true260 (+80)410 (+100)600 (+190)780 (+190)1,200 (+560)1,200 (+520)
GET/api/v3/sbom?total=true110 (+17)190 (+60)330 (+70)420 (+100)610 (-40)690 (-130)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}48 (+2)84 (+23)100 (0)110 (0)120 (+10)140 (+10)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download13 (+3)55 (+39)74 (+11)78 (+7)97 (+17)170 (+84)
GET/api/v3/advisory?deprecated=Consider&total=true20 (+9)65 (+19)82 (+10)99 (+21)1,800 (+200)2,900 (-500)
GET/api/v3/advisory?limit=1&total=true51 (+3)68 (+14)95 (-1)110 (+10)880 (+760)880 (-100)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true13 (+4)60 (+13)74 (+7)83 (+10)2,200 (+800)3,000 (-200)
GET/api/v3/advisory?offset=100&limit=10&total=true64 (+31)87 (+10)97 (+9)100 (+3)190 (-10)2,700 (0)
GET/api/v3/advisory?offset={offset}&limit=1220 (+20)400 (+30)520 (-30)610 (-30)710 (-260)710 (-270)
GET/api/v3/advisory?q=CVE-2021-&total=true190 (+70)310 (+50)1,100 (+230)1,800 (+500)2,400 (+600)4,000 (+800)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true48 (+2)76 (+23)110 (+10)110 (0)130 (+20)150 (+30)
GET/api/v3/advisory?q=modified>3 days ago&total=true9 (+3)51 (+38)67 (+10)72 (+8)84 (+12)150 (+70)
GET/api/v3/advisory?q=title~openssl&total=true36 (+21)75 (+14)90 (+15)100 (+18)180 (+20)690 (+270)
GET/api/v3/advisory?sort=modified:desc&total=true17 (+6)67 (+16)82 (+13)96 (+19)2,100 (+400)3,300 (+600)
GET/api/v3/advisory?total=true98 (+12)120 (+21)170 (+50)190 (+20)2,100 (+1,910)3,400 (+800)
vulnerability 7
POST/api/v3/vulnerability/analyze53 (-167)850 (+300)1,100 (+440)1,700 (+850)2,400 (+700)3,700 (+800)
GET/api/v3/vulnerability?offset=100&limit=10&total=true8 (+3)15 (-6)52 (+5)67 (+5)190 (+92)700 (+390)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true9 (+3)18 (+9)61 (+17)71 (+13)400 (+110)1,100 (+370)
GET/api/v3/vulnerability?q=base_severity=high&total=true9 (+3)14 (+3)62 (+10)73 (+5)810 (+310)1,500 (+500)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true10 (+4)24 (+13)66 (+17)75 (+10)360 (+50)1,300 (+610)
GET/api/v3/vulnerability?sort=base_score:desc&total=true500 (+100)650 (+120)910 (+120)1,100 (+110)1,800 (+400)2,400 (+700)
GET/api/v3/vulnerability?total=true9 (+3)14 (+5)56 (+14)69 (+12)490 (+418)600 (+420)
purl 15
GET/api/v3/purl/base/{purl}38 (+17)67 (+9)150 (+70)210 (+60)280 (+60)370 (-20)
GET/api/v3/purl/base?q=namespace=redhat&total=true47 (+2)85 (+11)100 (+5)110 (+10)290 (+150)940 (+320)
GET/api/v3/purl/base?q=type=rpm&total=true48 (+3)89 (+21)100 (+5)100 (+1)110 (0)120 (-20)
GET/api/v3/purl/base?sort=name:asc&total=true200 (+50)240 (+50)300 (+80)310 (+70)420 (+110)620 (+110)
GET/api/v3/purl/base?total=true47 (+3)87 (+21)99 (+7)100 (+2)110 (0)120 (-110)
POST/api/v3/purl/recommend220 (+50)270 (+60)320 (+70)340 (+50)450 (+120)610 (+80)
GET/api/v3/purl/{purl_id}74 (+14)93 (+13)120 (+22)160 (+50)190 (+20)260 (+70)
GET/api/v3/purl?offset=100&limit=10&total=true47 (+2)83 (+18)100 (+6)110 (+10)620 (+420)1,000 (+410)
GET/api/v3/purl?q=curl&total=true21 (+9)55 (+3)69 (+2)75 (0)1,200 (+270)1,700 (+300)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true14 (+3)49 (+1)65 (+4)71 (+5)84 (+1)92 (-18)
GET/api/v3/purl?q=name=curl&total=true10 (+3)47 (+2)63 (+4)71 (+4)190 (+10)280 (+20)
GET/api/v3/purl?q=purl:namespace=redhat&total=true9 (+3)48 (+5)61 (+2)69 (+6)2,500 (-100)3,200 (+300)
GET/api/v3/purl?q=purl:ty=rpm&total=true8 (+2)47 (+6)63 (+6)74 (+12)2,700 (+900)3,400 (+900)
GET/api/v3/purl?sort=purl:name:asc&total=true10 (+4)52 (+12)63 (+5)73 (+8)580 (+320)660 (+20)
GET/api/v3/purl?total=true8 (+2)45 (+8)60 (+3)63 (+2)94 (+17)480 (-30)
license 9
GET/api/v3/license/spdx/license/{license_id}43 (+1)44 (+1)45 (+1)47 (+2)63 (+6)93 (+14)
GET/api/v3/license/spdx/license?q=apache&total=true3 (+1)4 (+1)6 (+2)7 (+2)30 (+12)60 (+17)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (+1)46 (+2)47 (+2)69 (+10)89 (+4)
GET/api/v3/license/spdx/license?total=true43 (0)44 (+1)46 (+2)48 (+3)65 (+4)110 (+23)
GET/api/v3/license?limit=10&sort=license:asc&total=true27 (+12)59 (+7)77 (+11)84 (+10)99 (+8)180 (+30)
GET/api/v3/license?q=ASL&sort=license:desc&total=true16 (+6)53 (+6)71 (+11)79 (+10)93 (+11)150 (+40)
GET/api/v3/license?q=license~Apache&total=true13 (+5)49 (+8)63 (+6)71 (+5)84 (+4)160 (-30)
GET/api/v3/license?q=license~GPL&total=true13 (+5)50 (+7)64 (+7)73 (+8)87 (+10)160 (+30)
GET/api/v3/license?total=true59 (+6)95 (+7)110 (+10)120 (+10)140 (+10)210 (-50)
analysis 3
GET/api/v3/analysis/component/{component}6 (+2)8 (+3)62 (+42)69 (+6)76 (+5)100 (0)
GET/api/v3/analysis/latest/component/{cpe}6 (+2)8 (+3)63 (+32)69 (+6)77 (+6)280 (+180)
GET/api/v3/analysis/status5 (+1)8 (+3)62 (+41)68 (+5)75 (+4)100 (+1)
importer 1
GET/api/v3/importer?total=true4 (+1)6 (+2)55 (+49)66 (+7)73 (+4)110 (+10)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true5 (+1)7 (+2)62 (+38)68 (+5)75 (+3)110 (+13)
GET/api/v3/group/sbom?total=true5 (+1)7 (+2)62 (+45)69 (+7)75 (+4)100 (0)
GET/api/v3/group/sbom?totals=true&total=true5 (+1)7 (+2)62 (+43)68 (+5)75 (+4)110 (+15)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,800 (+1,900)6,300 (+2,100)6,700 (+2,300)7,100 (+2,600)8,100 (+3,300)8,100 (+3,000)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true60 (+12)100 (+14)110 (0)120 (+10)340 (+220)340 (+220)
GET/api/v3/sbom-labels?total=true56 (+8)100 (+15)110 (0)120 (+10)130 (+10)130 (+10)
other 2
GET/.well-known/trustify1 (0)1 (0)3 (+1)4 (+1)6 (+2)39 (-4)
POST/api/v3/ui/extract-sbom-purls1 (0)1 (0)3 (+1)4 (+1)6 (+1)50 (+12)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.